Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-01-12	CVE-2017-5346	SQL Injection vulnerability in Genixcms 0.0.8 SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php. network low complexity genixcms CWE-89	6.5
2015-03-23	CVE-2015-2678	Cross-site Scripting vulnerability in Genixcms 0.0.1 Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php. network genixcms CWE-79	4.3